Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
File:                     hX9MEi5PjGAfIcXIaHFtRgidheE.mft (raw, json)
Hash identifier:          d0LBGyxLoSxyOP2nvCVpvEla5VDrCGFe/9kR/b3/uDg=
Subject key identifier:   45:2B:6A:AA:63:13:CB:CD:8C:8A:32:E6:07:5B:24:1B:E3:7E:59:F8
Authority key identifier: 85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1
Certificate issuer:       /CN=857f4c122e4f8c601f21c5c868716d46089d85e1
Certificate serial:       01962FAB565E78E57FD19FE81E492734DDF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
Manifest number:          09B2
Signing time:             Sun 13 Apr 2025 15:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:19 +0000
Files and hashes:         1: hX9MEi5PjGAfIcXIaHFtRgidheE.crl (hash: yq48areawR7kQwhV5gS2gr+H9WTZI2hokqXexHKD/2E=)
                          2: wypxlBc1J8Bpx8wsCukzLkT7CzM.roa (hash: VSR04yRc8P3tg6W5nBtOO4BrNXPIDW2s4T0F9VJBzcY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:56:5e:78:e5:7f:d1:9f:e8:1e:49:27:34:dd:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=857f4c122e4f8c601f21c5c868716d46089d85e1
        Validity
            Not Before: Apr 13 15:01:19 2025 GMT
            Not After : Apr 14 15:01:19 2025 GMT
        Subject: CN=452b6aaa6313cbcd8c8a32e6075b241be37e59f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ed:29:fd:84:10:d1:99:77:e1:b0:0e:a9:4a:
                    31:1a:85:e0:0e:cb:7c:27:25:37:c7:bb:cc:44:7b:
                    f5:8b:a3:5a:c2:01:b1:2b:5e:3d:cc:31:1d:fd:a3:
                    99:1e:9d:d5:e5:a6:85:a4:62:7d:a4:aa:5e:86:80:
                    e8:5a:4c:da:92:64:51:12:73:60:69:7c:d0:96:bb:
                    00:86:be:14:78:e3:b8:95:c6:03:91:9f:1f:a4:f0:
                    23:96:c9:7a:0e:f0:5e:44:65:73:44:fd:d6:c1:2f:
                    bc:5e:52:f8:ce:d9:d5:70:61:91:5f:34:72:47:45:
                    26:4b:27:08:85:41:c2:eb:c3:04:2d:a8:20:1f:2f:
                    ff:6d:6d:8c:04:84:ff:69:68:a0:db:58:10:7f:ad:
                    30:ef:a1:e5:67:57:a4:66:86:d4:6d:61:b9:07:61:
                    b8:14:49:8f:c2:bd:b6:f5:eb:85:85:b9:b9:bb:b5:
                    cc:35:9c:6e:9c:51:79:48:5d:4d:20:2c:6d:00:b8:
                    cb:26:1a:13:2b:2b:fd:a6:a8:10:61:53:74:e3:68:
                    d6:44:cd:f8:85:21:79:b1:6e:b8:42:db:b3:f3:30:
                    96:68:83:4a:7e:33:e5:ae:c9:c3:89:2e:2f:44:d6:
                    0e:aa:3c:23:55:a2:68:de:63:09:57:19:b3:e4:76:
                    b3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:2B:6A:AA:63:13:CB:CD:8C:8A:32:E6:07:5B:24:1B:E3:7E:59:F8
            X509v3 Authority Key Identifier:
                keyid:85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:d9:e0:d1:c4:09:88:ef:b5:87:72:31:4d:fb:d9:76:6c:5d:
         44:b4:57:57:38:f4:e8:f7:f4:05:a2:8f:a7:d7:39:a9:05:45:
         14:20:b3:51:8f:16:05:26:9d:d8:85:f3:60:f3:ee:ae:20:98:
         a5:13:09:e6:31:f9:c2:89:95:4f:d9:97:d3:d3:20:7c:c5:27:
         7d:cb:ef:08:56:5a:d5:9f:eb:55:ac:e2:3e:ea:be:9f:81:7b:
         aa:e1:bc:c0:24:f3:70:7a:ff:7c:35:fe:fd:c3:f8:7f:39:02:
         35:bd:be:b8:5b:ca:9d:d4:02:eb:89:29:62:11:d0:9e:4f:3b:
         b8:07:db:95:0a:a5:a0:fd:c9:72:53:30:ae:81:f4:1b:eb:56:
         25:0c:91:8d:07:6b:51:cd:ec:20:d4:26:07:2f:47:23:ec:09:
         0e:a3:37:5f:d9:7e:db:bd:bc:35:86:1e:40:ea:6d:8c:f1:63:
         b3:85:5f:6a:48:49:9a:52:bc:76:aa:bc:8b:ee:d7:f4:49:e7:
         c4:18:d0:62:4f:1b:4d:49:93:0e:4d:0e:6c:e1:b2:eb:1c:53:
         4e:e0:2e:82:a3:a4:fb:a3:41:f4:e7:a1:c5:60:08:02:1a:df:
         d9:77:89:9b:25:67:4f:75:f2:e6:81:d1:4a:37:bc:80:93:b5:
         9b:95:35:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq1ZeeOV/0Z/oHkknNN32MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1N2Y0YzEyMmU0ZjhjNjAxZjIxYzVjODY4NzE2ZDQ2MDg5
ZDg1ZTEwHhcNMjUwNDEzMTUwMTE5WhcNMjUwNDE0MTUwMTE5WjAzMTEwLwYDVQQD
Eyg0NTJiNmFhYTYzMTNjYmNkOGM4YTMyZTYwNzViMjQxYmUzN2U1OWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu0p/YQQ0Zl34bAOqUoxGoXgDst8
JyU3x7vMRHv1i6NawgGxK149zDEd/aOZHp3V5aaFpGJ9pKpehoDoWkzakmRREnNg
aXzQlrsAhr4UeOO4lcYDkZ8fpPAjlsl6DvBeRGVzRP3WwS+8XlL4ztnVcGGRXzRy
R0UmSycIhUHC68MELaggHy//bW2MBIT/aWig21gQf60w76HlZ1ekZobUbWG5B2G4
FEmPwr229euFhbm5u7XMNZxunFF5SF1NICxtALjLJhoTKyv9pqgQYVN042jWRM34
hSF5sW64Qtuz8zCWaINKfjPlrsnDiS4vRNYOqjwjVaJo3mMJVxmz5HazZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUraqpjE8vNjIoy5gdbJBvjfln4MB8GA1UdIwQY
MBaAFIV/TBIuT4xgHyHFyGhxbUYInYXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFg5TUVpNVBqR0FmSWNYSWFIRnRSZ2lkaGVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85NjE5MzktYWM4ZS00ZDEyLWIxMmYt
ZGE1Y2IwZmIxOWU3LzEvaFg5TUVpNVBqR0FmSWNYSWFIRnRSZ2lkaGVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85NjE5MzktYWM4ZS00ZDEyLWIxMmYtZGE1Y2IwZmIxOWU3
LzEvaFg5TUVpNVBqR0FmSWNYSWFIRnRSZ2lkaGVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAitng0cQJ
iO+1h3IxTfvZdmxdRLRXVzj06Pf0BaKPp9c5qQVFFCCzUY8WBSad2IXzYPPuriCY
pRMJ5jH5womVT9mX09MgfMUnfcvvCFZa1Z/rVaziPuq+n4F7quG8wCTzcHr/fDX+
/cP4fzkCNb2+uFvKndQC64kpYhHQnk87uAfblQqloP3JclMwroH0G+tWJQyRjQdr
Uc3sINQmBy9HI+wJDqM3X9l+2728NYYeQOptjPFjs4VfakhJmlK8dqq8i+7X9Enn
xBjQYk8bTUmTDk0ObOGy6xxTTuAugqOk+6NB9OehxWAIAhrf2XeJmyVnT3Xy5oHR
Sje8gJO1m5U1lA==
-----END CERTIFICATE-----